How to fix
Protect your Device from Petya/NotPetya Attack
on Windows

I’ve recently read an article about this new ransomware called Petya that is currently spreading across Europe. I own a small retail business, and I wonder if there is anything I could do to protect the company data?

Petrwrap, NotPetya, Petya.a are just a few different names that have been given to the new string of Petya ransomware that has hit the web towards the end of June. Why so many different names, you ask? One answer may be that this variant of the well-known ransomware deviates from the original so much that it deserves a separate title.

Regardless of how you call it, the virus is what it is -- a file encrypting parasite which demands 300 dollars for the recovery of a single computer. The parasite may ask times more than that if it infects large computer networks belonging to companies and organizations.

The virus spreads across European countries of Ukraine, Germany, Poland, France, Italy and also appears in some reported attack cases in the US.

Unfortunately, kill switch for this cyber threat does not exist, nor the cryptologists or malware experts have found a way to decrypt the enciphered files.

Nevertheless, the cyber security experts managed to come up with a way to prevent Petya/NotPetya attack, and it involves creating a read-only file called perfc on the Windows partition C:. More detailed instructions explaining how to perform this procedure step-by-step are presented below.

Creating read-only perfc file:

The first thing you have to do is configure Windows to display file extensions next to the filenames. You have to make sure to check the Show hidden files, folders and drives option in the list of the Folder Options. Then, continue with the procedure:

1. Open the C:\Windows folder and locate the notepad.exe program.
2. Copy and paste this program in the same folder
3. When prompted for permission to copy the files, select Continue
4. A new file called notepad - Copy.exe will be created on the folder, and you will have to rename it to “perfc” (left-click the file and select “Rename.”)
5. In the “Rename” confirmation prompt click Yes and Continue.
6. Now, right-click the perfc file and enter its properties
7. In the properties window, you will see a check-box with the read-only option. Make sure it is checked.
8. Click OK to confirm.

Completing these steps should provide your PC with a layer of security, but definitely won’t shield your from the threat unconditionally. You will have to make sure your device is running the latest Windows version, and the installed software regularly receives updates.

Also, if you want to keep your data really safe, keep in mind that data backups are the key.